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Attorney Docket No. CISCO-3041 

Amendments to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

1 . (Currently Amended) A method for providing computer network access, comprising: 
receiving a PPP session creation request from a client, said PPP session creation request 

including a control protocol frame encapsulated therein; 

obtaining user domain information associated with said PPP session creation request; 

setting up a Layer 2 tunnel for said client according to a parameter contained in said 
control protocol frame; 

creating an ingress PPP object associated with an incoming PPP session, a host object 
associated with said client, and an egress PPP object associated with said Layer 2 tunnel; 

creating an egress IP object based upon obtained user domain information, said egress BP 
object associated with IP-based forwarding; 

linking said ingress PPP object, said host object, and said egress PPP object, thereby 
forwarding data packets from a PPP session with said client over said Layer 2 tunnel; and 

linking said host object and said egress IP object, thereby forwarding EP frames received 
from said client over a link other than said Layer 2 tunnel. 

2. (Original) The method according to claim 1, wherein said setting up includes forwarding 
control protocol negotiations. 

3. (Original) The method according to claim 1, frirther including: 

receiving an IP address through said Layer 2 tunnel, said IP address having been assigned 

to said client; and 

transferring said IP address to said client. 
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4. (Original) The method according to claim 1, wherein said user domain information is 

obtained from said PPP session creation request. 

5. (Original) The method according to claim 1, wherein said user domain information is 
obtained using a user profile. 

6. (Original) The method according to claim 1, wherein said user domain information is 
obtained from user identification information associated with a physical cormection of said PPP 
session creation request. 

7. (Original) The method according to claim 6, wherein said user domain information is 
obtained from a line number used by said client for transmitting said PPP session creation 
request. 

8. (Original) The method according to claim 1, wherein said user domain information is 
obtained from user identification information associated with a physical location of said client. 

9. (Original) The method according to claim 1 , further comprising: 
maintaining a forwarding information base for said host object, said forwarding 

information base containing at least one association between a network address and either said 
ingress PPP object or said egress PPP object. 

10. (Original) The method according to claim 9, wherein said forwarding information base 

includes a default link to said egress PPP object. 
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1 1 . (Original) The method according to claim 9, wherein said forwarding information base is 
stored in the form of a hash table. 

12. (Original) The method according to claim 1, wherein said creating an ingress PPP object 
includes creating an access PPP object associated with a PPP cormection to said client via a first 
interface. 

13. (Original) The method according to claim 12, wherein said creating an egress PPP object 
includes: 

creating a first connection object containing a range of IP addresses; 
creating an aggregation PPP object associated with outgoing PPP frames; and 
creating a tunnel object associated with Layer 2 tunneling through a second interface. 

14. (Original) The method according to claim 13, wherein said first cormection object 
includes a list of network addresses. 

15. (Original) The method according to claim 13, wherein said creating an egress IP object 
includes: 

creating a second connection object containing a range of IP addresses; and 

creating a service object associated with IP frame forwarding through a third interface. 

16. (Original) The method according to claim 15, wherein said second connection object 
includes a list of network addresses. 
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17. (Original) The method according to claim 15, further comprising maintaining a 

forwarding information base for said host object, said forwarding information base containing: 
an association between said access PPP object and an address of said client; and 
a default link to said aggregation PPP object. 

18. (Original) The method according to claim 17, wherein 

said creating said first connection object includes adding into said forwarding information 
base an association between said aggregation PPP object and a corresponding network address, 
and 

said creating said second connection object includes adding into said forwarding 
information base an association between said service object and a corresponding network 
address. 

19. (Currently Amended) A network device for providing computer network access, said 
network device comprising: 

a first interface for receiving a PPP session creation request from a client, said PPP 
session creation request including a control protocol frame encapsulated therein; 

a second interface for forwarding data packets from a PPP session over a Layer 2 tunnel; 
a third interface for forwarding IP frames over a link other than said Layer 2 tunnel; 
a memory; and 

a processor coupled with said first interface, said second interface, said third interfaces, 

and said memory, said processor including: 

a domain information determiner for obtaining user domain information 

associated with said PPP session creation request; 
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an object generator for creating objects in said memory, said object 

generator creating an ingress PPP object associated with an incoming PPP session, 

a host object associated with said client, an egress PPP object associated with 

Layer 2 turmeling through said second interface, and an egress IP object 

associated with IP -based forwarding through said third interface, said egress IP 

object being created based upon obtained user domain information; 

a PPP session forwarder for setting up a Layer 2 tuimel for said chent 

according to a parameter contained in said control protocol frame, and for linking 

said ingress PPP object, said host object, and said egress PPP object, thereby 

forwarding data packets from a PPP session with said client over said Layer 2 

tunnel; and 

an IP frame forwarder for linking said host object and said egress IP 
object, thereby forwarding IP frames received from said client over a link other 
than said Layer 2 turmel. 

20. (Original) The network device according to claim 19, wherein said ingress PPP object 
includes an access PPP object associated with a PPP connection with said chent via said first 
interface. 

21. (Original) The network device according to claim 19, wherein said egress PPP object 
includes: 

a PPP session connection object containing a range of IP addresses; 

an aggregation PPP object associated with outgoing PPP frames; and 

a turmel object associated with Layer 2 turmeling through said second interface. 
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22. (Original) The apparatus according to claim 19, wherein said egress IP object includes: 

an DP frame connection object containing a range of IP addresses; and 

a service object associated with IP frame forwarding through said third interface. 

23. (Original) The network device according to claim 19, wherein said PPP session 
forwarder forwards control protocol negotiations when setting up said Layer 2 tunnel. 

24. (Original) The network device according to claim 19, wherein said PPP session 
forwarder includes: 

an IP address forwarder for receiving an IP address through said Layer 2 tunnel, said IP 
address having been assigned to said client, and for transferring said IP address to said client. 

25. (Original) The network device according to claim 19, wherein said domain information 
determiner obtains said user domain information from said PPP session creation request. 

26. (Original) The network device according to claim 19, wherein said domain information 
determiner obtains said user domain information using a service profile. 

27. (Original) The network device according to claim 19, wherein said domain information 
determiner obtains said user domain information from user identification information associated 
with a physical connection of said PPP session creation request. 
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28. (Original) The network device according to claim 27, wherein said domain information 

determiner obtains said user domain information from a line number used by said client for 
transmitting said PPP session creation request. 

29. (Original) The network device according to claim 19, wherein said domain information 
determiner obtains said user domain information from user identification information associated 
with a physical location of said client. 

30. (Original) The network device according to claim 19, fiirther comprising: 

a forwarding information base provided for said host object, said forwarding information 
base containing at least one association between a network address and either said ingress PPP 
object or said egress PPP object. 

3 1 . (Original) The network device according to claim 30, wherein said forwarding . 
information base includes a default link to said egress PPP object. 

32. (Original) The network device according to claim 30, wherein said forwarding 
information base is stored in the form of a hash table. 

33. (Original) An apparatus for providing computer network access, said apparatus 
comprising: 

a PPP session receiving interface; 

a PPP session Layer 2 tunneling interface; 

an IP frame forwarding interface; 
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a memory, said memory containing: 

an ingress PPP object associated with said PPP session receiving interface; 
a host object associated with a client requesting network access; 
an egress PPP object associated with said PPP session Layer 2 tunneling interface; and 

an egress IP object associated with said IP frame forwarding interface; and 
a processor coupled with said PPP session receiving interface, said PPP session Layer 2 
tunneling interface, said LP frame forwarding interface, and said memory, said processor 
including: 

a user domain information determiner; 

an object generator responsive to said user domain information 
determiner; 

a PPP session forwarder linking through said ingress PPP object, said host 
object, and said egress PPP object; and 

an IP frame forwarder linking through said host object and said egress IP 

object. 

34. (Original) An apparatus according to claim 33, fiuther comprising: 

a forwarding information base associated with said host object, said forwarding 
information base containing at least one association between a network address and either said 
ingress PPP object or said egress PPP object. 

35. (Original) The apparatus according to claim 34, wherein said forwarding information 
base is stored in the form of a hash table in said memory. 
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36. (Original) The apparatus according to claim 34, wherein said forwarding information 

base includes a default link to said egress PPP object. 

37. (Original) The apparatus according to claim 36, wherein said forwarding information 
base further includes an association between said egress IP object and a corresponding network 
address. 

38. (Original) The apparatus according to claim 33, wherein said ingress PPP object includes 
an access PPP object associated with a PPP connection to said client via said PPP session 
receiving interface. 

39. (Original) The apparatus according to claim 33, wherein said egress PPP object includes: 
a PPP session connection object containing a range of IP addresses; 

an aggregation PPP object associated with outgoing PPP frames; and 
a tunnel object associated with Layer 2 tunneling through said PPP session Layer 2 
tunneling interface. 

40. (Original) The apparatus according to claim 33, wherein said egress IP object includes: 
an IP frame connection object containing a second range of IP addresses; and 

a service object associated with IP frame forwarding through said IP frame forwarding 
interface. 
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41 . (Currently Amended) A system for providing computer network access, comprising: 

means for receiving a PPP session creation request from a client, said PPP session 
creation request including a control protocol frame encapsulated therein; 

means for obtaining user domain information associated with said PPP session creation 
request; 

means for setting up a Layer 2 tunnel for said client according to a parameter contained in 
said control protocol frame; 

means for creating an ingress PPP object associated with an incoming PPP session, a host 
object associated with said client, an egress PPP object associated with said Layer 2 tunnel; 

means for creating an egress IP object based upon obtained user domain information, said 
egress IP object associated with IP-based forwarding; 

means for linking said ingress PPP object, said host object, and said egress PPP object, 
thereby forwarding data packets from a PPP session with said client over said Layer 2 tunnel; and 

means for Hnking said host object and said egress JP object, thereby forwarding IP frames 
received from said client over a link other than said Layer 2 tunnel. 

42. (Original) The system according to claim 41, wherein said means for setting up includes 
means for forwarding control protocol negotiations. 

43. (Original) The system according to claim 41, further including: 

means for receiving an IP address through said Layer 2 tunnel, said IP address having 
been assigned to said client; and 

means for transferring said IP address to said client. 
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44. (Original) The system according to claim 41, wherein said user domain information is 

obtained from said PPP session creation request. 

45. (Original) The system according to claim 41, wherein said user domain information is 
obtained using a user profile. 

46. (Original) The system according to claim 41, wherein said user domain information is 
obtained from user identification information associated with a physical cormection of said PPP 
session creation request. 

47. (Original) The system according to claim 46, wherein said user domain information is 
obtained from a line number used by said client for transmitting said PPP session creation 
request. 

48. (Original) The system according to claim 41, wherein said user domain information is 
obtained from user identification information associated with a physical location of said client. 

49. (Original) The system according to claim 41, ftirther comprising: 

means for maintaining a forwarding information base for said host object, said forwarding 
information base containing at least one association between a network address and either said 
ingress PPP object or said egress PPP object. 

50. (Original) The system according to claim 49, wherein said forwarding information base 

includes a default link to said egress PPP object. 
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5 1 . (Original) The system according to claim 49, wherein said forwarding information base 

is stored in the form of a hash table. 

52. (Original) The system according to claim 41, wherein said ingress PPP object includes an 
access PPP object associated with a PPP connection to said client via a first interface. 

53. (Original) The system according to claim 52, wherein said egress PPP object includes: 
a first connection object containing a range of IP addresses; 

an aggregation PPP object associated with outgoing PPP frames; and 

a tunnel object associated with Layer 2 tunneling through a second interface. 

54. (Original) The system according to claim 53, wherein said first connection object 
includes a list of network addresses. 

55. (Original) The system according to claim 53, wherein said egress IP object includes: 
a second connection object containing a range of IP addresses; and 

a service object associated with IP frame forwarding through a third interface. 

56. (Original) The system according to claim 55, wherein said second connection object 
includes a Ust of network addresses. 

57. (Original) The system according to claim 55, further comprising means for maintaining a 
forwarding information base for said host object, said forwarding information base containing: 
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an association between said access PPP object and an address of said client; and 

a default link to said aggregation PPP object. 

58. (Original) The system according to claim 57, wherein 

said means for creating said first connection object includes means for adding into said 
forwarding information base an association between said aggregation PPP object and a 
corresponding network address, and 

said means for creating said second connection object includes means for adding into said 
forwarding information base an association between said service object and a corresponding 
network address. 

59. (Currently Amended) A program storage device readable by a machine, tangibly 
embodying a program of instructions executable by the machine to perform a system for 
providing computer network access, the system including: 

receiving a PPP session creation request from a client, said PPP session creation request 
including a control protocol frame encapsulated therein; 

obtaining user domain information associated with said PPP session creation request; 

setting up a Layer 2 tunnel for said client according to a parameter contained in said 
control protocol frame; 

creating an ingress PPP object associated with an incoming PPP session, a host object 
associated with said client, and an egress PPP object associated with said Layer 2 tunnel; 

creating an egress IP object based upon obtained user domain information, said egress IP 
object associated with IP-based forwarding; 
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linking said ingress PPP object, said host object, and said egress PPP object, thereby 

forwarding data packets from a PPP session with said client over said Layer 2 tunnel; and 

linking said host object and said egress IP object, thereby forwarding IP frames received 

from said client over a link other than said Layer 2 tunnel. 
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